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The invention related to a method for multicast in 
a radio network, which includes at least one base station 
(BTS) and a plurality of mobile terminals (MS). The method 
comprises the steps of: broadcasting the broadcast message 
from at least one base station (BTS), receiving the broadcast 
message at mobile terminals (MS). It is characteristic for the 
method according to the invention that it further comprises 
the steps of: formulating at least one broadcast message as a 
multicast message, delivering a token needed to recover the 
information of the multicast message to a selected first group 
of mobile terminals (MS 1, MS2, MS3), which group includes 
at least two mobile terminals, and using the delivered token 
at the said group of mobile terminals to allow the reception 
and recovery of the multicast messages. 
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Multicast transmission in a radio network 
Field of the invention 

The invention relates to a multicast service providing message de- 
5 livery to selected subscribers in a radio network. 

Background of the invention 

In the digital GSM mobile communications system (Global System 
for Mobile communications), in addition to speech and data connections a 

10 short message service is implemented. Short messages are transmitted 
along control and signaling channels with other signaling of the network. 
Short message services can be divided into point-to-point and cell broadcast 
services. Point-to-point short messages are either mobile originating or mo- 
bile terminating. Cell broadcast short messages are transmitted from base 

15 stations and are intended for all mobile stations in the coverage area of the 
transmission. Examples of cell broadcast services are traffic and weather 
information delivery. 

Figure 1 of the attached drawing shows a simplified block diagram 
of the GSM mobile communications system. The mobile station MS is con- 

20 nected via a radio path to a base transceiver station BTS, in Figure 1 , to the 
base station BTS1. A base station sub-system BSS consists of a base sta- 
tion controller BSC and, the base stations BTS controlled by it. A mobile ser- 
vices switching center MSG usually controls several base station controllers 
BSC and is connected to other mobile services switching centers and a 

25 GMSC (Gateway Mobile Services Switching Center). Via the GMSC, the 
GSM network is connected to other networks, such as the PSTN (Public 
Service Telephone Network), another mobile communication network PLMN, 
the ISDN network, the intelligent network IN, or the short message service 
center SMSC. The operation of the entire GSM system is monitored by the 

30 operation and maintenance center OMC. 

Figure 2 of the attached drawing illustrates three cells C1, C2, and 
C3, which offer cell broadcast messages to all the mobile stations MS lo- 
cated in these cells, including the one marked MS1 . It would also be possible 
to transmit cell broadcast messages only from some cells, for example, from 

35 cells C1 and C2. The cell broadcast messages are created by a cell broad- 
cast entity CBE, a news agency, for example, and they are transmitted to 
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mobile stations MS via an appropriate mobile communications network. The 
CBE transfers the cell broadcast message to a cell broadcast center CBC 
connected with the BSC in the GSM network, in this example. The cell 
broadcast center CBC controls the message transmission on the cell broad- 
5 cast channels of individual BTSs, and transmits via the BSC the messages 
to each BTS addressed. The cell broadcast is transmitted across the air in- 
terface in the cell broadcast channel BCCH of the BTS or in paging channels 
PCH. Cell broadcast is intended for all receiving mobile stations, therefore it 
is not addressed nor encrypted. For a more detailed description of cell 

10 broadcast, a reference is made to the GSM-specification GSM 03.41 
"European digital cellular telecommunication system (Phase 2); Technical 
realization of Short Message Service Cell Broadcast (SMSCB)". 

In order to implement the point-to-point short message service, the 
GSM network is connected to the short message service center SMSC. The 

15 SMSC forms a connection between a particular short message network and 
the GSM network by transferring the short message from outside the GSM 
network to a mobile subscriber and from one mobile subscriber to another or 
to some other unit outside the GSM network that is able to receive short 
messages. A mobile terminating short message is routed from the short 

20 message network via the short message service center SMSC to the MSC of 
the GSM network and from there via the appropriate BSC and BTS to the 
mobile station MS, i.e. via BTS1 to MS1 in Figures 1 and 2. Accordingly, a 
mobile originating short message is transmitted from the MS via BTS and 
BSC to the MSC which transfers the short message from the GSM network 

25 to the SMSC, in order to be transmitted to the appropriate short message 
network. Short messages are transferred transparently in the network be- 
tween the short message service center SMSC and the mobile station MS. 

The confidentiality of the transmission is sometimes arranged with 
ciphering, for example. Figure 3 of the attached drawing shows a block dia- 

30 gram of a known symmetric cipher algorithm which can be used to protect 
transmission. The symmetric ciphering algorithm is based on a secret key 
shared between the communicating parties. At party A's end the message M 
to be sent to party B is encrypted in box E in Figure 3 with the shared secret 
key K. The message is sent over a transmission route as the encrypted ci- 

35 pher text C, which party B can decrypt in box D shown in Figure 3 with the 
same secret key K. Through decryption party B gets the original message M. 
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An intruder eavesdropping transmission needs to know the secret key K in 
order to be able to read and understand the transmitted cipher text C. The 
encryption and decryption of the symmetric algorithm can be expressed by 
the equations: 
5 C = E K (M) 

M = D K (C), 

where C is the cipher text, M is the message in plain text, E K is the 
encryption with key K, and D K is the decryption with key K. Presently cipher- 
ing is not applied to the short messages routed through the GSM network 

1 0 except in the air interface. 

The problem with known short message services is that messages 
are either transmitted to all mobile stations in the coverage area of the 
transmission (cell broadcast) or with dedicated transmission to one ad- 
dressed mobile station at a time (point-to-point). Neither of these transmis- 

15 sion methods is useful for transmitting messages to a selected group of mo- 
bile stations, as prior art cell broadcast cannot be directed only to some of 
the mobile stations, and transmitting the same message with several point- 
to-point short messages to a group of mobile stations causes too much sig- 
naling in the network and requires a relatively long time to provide all the re- 

20 cipients with the message. 

Summary of the invention 

The object of this invention is to provide multicast transmission to a 
selected group of mobile stations in a way that minimizes the signaling in the 
25 network. 

This is achieved by using a method according to the invention 
characterized by what is stated in the independent claim 1 . Special embodi- 
ments of the invention are presented in the dependent claims. 

The invention relates also to an arrangement characterized by 
30 what is stated in the independent claim 11. Special embodiment of the in- 
vention is presented in the dependent claim 12. 

The invention is based on the idea that a broadcast message is 
used for multicast transmission and a token is needed at the mobile terminal 
to recover the information sent in this broadcast message intended forjnul- 
35 ticast. The token is delivered to selected mobile terminals in a point-to-point 
short message, for example. In the primary embodiment of the invention, the 
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cell broadcast messages intended for multicast are encrypted and the keys 
for decryption are delivered only to those mobile terminals entitled to receive 
the multicast messages. The mobile stations store the delivered token, which 
is in this case the cryptographic key, in their memory, in the SIM card, for ex- 

5 ample. In the secondary embodiment of the invention, selected mobile termi- 
nals are enabled to receive and recover the multicast messages. The token 
delivered is a command removing the restriction in order to recover the mul- 
ticast transmission at the mobile terminal. For example, the command might 
be an instruction to start to listen to the multicast or an instruction to tune in 

10 to a certain channel. 

The advantage of the method according to the invention is that it 
provides a way to implement a short message service to a selected group of 
mobile terminals on a subscription basis. 

Another advantage of the method according to the invention is that 

15 it uses network capacity sparingly, since the information can be delivered to 
several mobile terminals with only one short message. 

The advantage of the arrangement according to the invention is 
that the token delivery and the recovery of the multicast messages is trans- 
parent for the mobile subscriber. 

20 

Brief description of the drawings 

The preferred embodiments of the invention will now be described 
with reference to the attached drawings, in which 

25 Figure 1 shows the parts of the mobile communication network that are es- 
sential for the invention; 
Figure 2 shows a prior art cell broadcast network; 

Figure 3 shows a known symmetric ciphering algorithm as a block diagram; 

Figure 4 shows a multicast network according to the primary embodiment of 
30 the invention; 

Figure 5 shows the functional parts of the mobile station according to the 
primary embodiment of the invention; 

Figure 6 shows the primary embodiment of the invention as a flowchart; 

Figure 7 shows a multicast network according to the secondary embodi- 
35 ment of the invention; and 

Figure 8 shows the secondary embodiment of the invention as a flowchart. 
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Detailed description of the invention 

The present invention can be applied to any radio network. The in- 
vention will be described below in more detail mostly by using the digital mo- 
bile communications system GSM as an example. Figure 1 shows the sim- 
5 plified structure of a GSM network as described earlier. For a more detailed 
description of the operation and structure of a GSM system, a reference is 
made to GSM specifications and to the book: "The GSM System for Mobile 
Communications", M. Mouly & M. Pautet, Palaiseau, France, 1992, ISBN:2- 
9507190-0-7. 

10 In the following, the primary embodiment of the invention is de- 

scribed in more detail with reference to Figures 4, 5, and 6. In the primary 
embodiment of the invention, the token needed for multicast message re- 
covery is a cryptographic key. This cryptographic key is used to encrypt the 
multicast message before transmission and to decrypt the multicast message 

15 at selected mobile stations. 

Figure 4 shows an example of a multicast network with cells C1, 
C2, and C3. In each of these cells one of the base stations BTS1, BTS2, 
BTS3 serve mobile stations MS, MS1, MS2, MS3 in the area of the corre- 
sponding cell. In the network in Figure 4, mobile subscribers can subscribe to 

20 a special sen/ice, such as top ten news delivery, implemented with the mul- 
ticast method according to the invention. For example, in Figure 4 mobile 
stations MS1, MS2, and MS3 have indicated, by a telephone call, a point-to- 
point short message or by paying a subscription fee to the service provider's 
bank account, for example, that they wish to subscribe to this speciaf serv- 

25 ice. According to the invention, the short message service center SMSC de- 
livers to the group of special service subscribers MS1, MS2, and MS3 a 
point-to-point short message including a cryptographic key K for this special 
service. These point-to-point messages, marked with SM in Figure 4, are de- 
livered to the mobile stations via the GSM network as described earlier in 

30 connection with prior art. For clarity reasons this short message routing is not 
shown in Figure 4. The cryptographic key K according to the invention is 
stored advantageously in the SIM card of the mobile stations MS1, MS2, and 
MS3. Another alternative is to store the cryptographic key K in other parts of 
the mobile station, in the mobile equipment part, for example. 

35 In Figure 4 the cell broadcast entity CBE initiates cell broadcast 

messages according to prior art. Those cell broadcast messages intended 
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for multicast delivery are, according to the invention, encrypted in unit E with 
the cryptographic key K. The cryptographic algorithm used can be any sym- 
metric cipher algorithm, for example. The encryption unit for encrypting the 
multicast messages can be located at the CBE, for example. The cell broad- 
5 cast center CBC controls the cell broadcasts of base stations BTS1, BTS2, 
and BTS3 and sends cell broadcast messages to the base stations ad- 
dressed. The base stations broadcast these encrypted cell broadcast mes- 
sages. All the mobile stations located in the area of cells C1, C2, C3 receive 
the encrypted cell broadcast message, but only the mobile stations which 
10 subscribed to this special service can decrypt and read the messages. 

Figure 5 shows the primary embodiment of one mobile station 
MS1 according to the invention. The functionality of the other mobile stations 
MS2 and MS3 realizing the primary embodiment of the method according to 
the invention is similar to that of MS1 . According to the invention, MS1 stores 
15 the cryptographic key K received in a point-to-point short message in a SIM 
card for later retrieval. When receiving an encrypted cell broadcast message 
C, the MS1 identifies the message and chooses the correct cryptographic 
key K from the memory, as located in the SIM card, for example. The MS1 
decrypts the received message C in box D with the chosen key K and gets 
20 the short message M in plain text form. From the subscriber s point of view, 
the key delivery and the decryption of the multicast messages is fully trans- 
parent. 

In case the same mobile station MS subscribes to several special 
services, there is need to deliver several cryptographic keys to the mobile 
25 station. These cryptographic keys must be identified in order to apply them 
for the right encrypted messages. For example, an encrypted message can 
be identified using the message identifier field of the message. This field 
identifies the source and type of the message. The message identifier field is 
not encrypted. Based on this message identifier value, the mobile station 
30 then chooses the cryptographic key K corresponding to the special service 
that the message represents. 

Figure 6 shows the method according to the primary embodiment 
of the invention as a flowchart. At stage 61 in Figure 6, the cryptographic key 
K for decryption is delivered to the selected mobile stations, with a point-to- 
35 point short message. The cell broadcast message intended for multicast is 
encrypted with the cryptographic key K (stage 62). After that the encrypted 
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message is broadcast from the base stations addressed (stage 63) and re- 
ceived in mobile stations located in the coverage area of the transmission. 
The selected mobile stations choose the cryptographic key K corresponding 
to the encrypted message received (stage 64) and decrypt the message with 
5 this correct key K (stage 65) after which the message is legible and under- 
standable in plain text form. 

Figure 7 shows an example of a multicast network according to the 
secondary embodiment of the invention. As described above in connection to 
Figure 4 of the primary embodiment of the invention, the mobile stations 

10 MS1, MS2, and MS3 have indicated that they wish to subscribe to the spe- 
cial sen/ice provided with the multicast method according to the invention. In 
the secondary embodiment of the invention, the short message service cen- 
ter SMSC delivers to the group of special service subscribers MS1, MS2, 
and MS3 a point-to-point short message which includes a command ena- 

15 bling the mobile station to start to recover the transmission of the special 
service in multicast. This command may include instructions to tune in to the 
channel of the transmission and/or a message which acts as a kind of pass- 
word in allowing the mobile station to recover the multicast service. These 
point-to-point short messages are marked with SM in Figure 7. The multicast 

20 message is initiated, routed, and broadcast in the same way as a cell broad- 
cast message described in connection with prior art. 

In the secondary embodiment of the invention, the restriction to 
utilize the cell broadcast message intended for multicast is at the mobile sta- 
tion. All the mobile stations in the coverage area of the transmission are able 

25 to listen to this special multicast transmission but only the mobile stations 
MS1, MS2, MS3 subscribing to the multicast service are able to recover the 
information of this multicast by the special enabling point-to-point short mes- 
sage SM. Therefore, other mobile stations marked with MS in Figure 7 are 
not able to recover the information in the multicast message. 

30 Figure 8 shows the method according to the secondary embodi- 

ment of the invention as a flowchart. In the secondary embodiment of the in- 
vention, the recovery of the information in the multicast message is made 
possible at selected mobile stations with a special command. At stage 81 in 
Figure 8 the SMSC transmits the enabling point-to-point short message to 

35 the group of selected mobile stations. The addressed base stations broad- 
cast the multicast message (stage 82) in the same way as a prior art cell 
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broadcast message. This message is received and recovered at the selected 
mobile stations (stage 84). 

The token delivery messages of the primary and secondary em- 
bodiment of the invention can be encrypted or otherwise provided connection 
5 security. 

In the other embodiments of the invention, instead of point-to-point 
short message delivery, the token can be delivered to the selected mobile 
stations by mail or by manual implantation via the keyboard, for example. 
The token delivered, such as the cryptographic key K used to encrypt cell 

10 broadcast messages, can be changed periodically for security or invoicing 
purposes, for example. The new token is delivered to active subscribers, i.e. 
to subscribers who have paid their renewal fees, for example. The old token 
expires when the new token is delivered. The new token is then necessary 
for multicast message recovery. Otherwise the other embodiments of the in- 

15 vention correspond to the primary or secondary embodiments described 
above. 

The drawings and the related description are only intended to 
demonstrate the principles of the invention. The details of the method ac- 
cording to the invention can vary within the patent claims. The invention is 

20 not restricted for use only in connection with GSM network as presented 
above in the examples, but can be applied to any radio network. Therefore, 
the mobile station of the examples above should be understood to be any 
mobile terminal in any radio network. Although the invention was described 
above mostly in connection with cell broadcast messages in the GSM net- 

25 work, the invention can be applied to any messages transmitted in an area 
for all the mobile terminals located in that area, point-to-multipoint messages 
in GPRS (General Packet Radio Service), for example. The functionality ac- 
cording to the primary embodiment of the invention is also suitable for use 
with cryptographic algorithms other than the symmetric algorithm described 

30 above. 
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Claims 

1. A method for multicast in a radio network, which includes at 
least one base station (BTS) and a plurality of mobile terminals (MS), 
wherein the method comprises the steps of: 

5 broadcasting the broadcast message from at least one base sta- 

tion (BTS), 

receiving the broadcast message at mobile terminals (MS), 
characterized in that the method further comprises the steps 

of: 

10 formulating at least one broadcast message as a multicast mes- 

sage, 

delivering a token needed to recover the information of the mul- 
ticast message to a selected first group of mobile terminals (MS1, MS2, 
MS3), which group includes at least two mobile terminals, and 
15 using the delivered token at the said group of mobile terminals to 

allow the reception and recovery of the multicast messages. 

2. A method according to claim 1, characterized in that the 
method comprises the steps of: 

delivering a cryptographic key (K) to a selected first group of mo- 
20 bile terminals (MS1, MS2, MS3), which group includes at least two mobile 
terminals, 

encrypting a broadcast message with the cryptographic key (K) 
before broadcasting it, 

decrypting the broadcast message at mobile terminals of the se- 
25 lected group (MS1, MS2, MS3) with the delivered cryptographic key (K). 

3. A method according to claim 2, characterized in that the 
method comprises the step of: 

delivering the cryptographic key (K) to the group of mobile termi- 
nals (MS1, MS2, MS3) with point-to-point short messages (SM). 
30 4. A method according to claim 2 or 3, characterized in that 

the method further comprises the step of: 

storing the cryptographic key (K) at mobile terminal. 

5. A method according to claim 2 or 3, characterized in that 

the method further comprises the step of: 

35 storing the cryptographic key (K) at mobile terminal's SIM card. 
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6. A method according to claim 2, characterized in that the 
method further comprises the steps of: 

changing the cryptographic key (K) and 

delivering the new cryptographic key to a selected second group of 
5 mobile terminals. 

7. A method according to claim 6, characterized in that the 
selected second group of mobile terminals differs from the selected first 
group of mobile terminals. 

8. A method according to one of the claims 1 to 3, character- 
10 ized in that the method further comprises the steps of: 

identifying the multicast message by a message identifier that is 
attached to the message and 

choosing the cryptographic key (K) relating to the message based 
on the message identifier of the multicast message. 
15 9. A method according to claim 1, characterized in that the 

method comprises the steps of: 

delivering an enabling command to a selected group of mobile 
terminals (MS1, MS2, MS3), which group includes at least two mobile termi- 
nals, and 

20 enabling the reception and recovery of the multicast message at 

mobile terminals which have received the enabling command. 

10. A method according to claim 9, characterized in that the 
method comprises the step of: 

delivering the enabling command to the group of mobile terminals 
25 (MS1, MS2, MS3) with point-to-point short messages (SM). 

11. A method according to claim 9 or 10, characterized in that 
the method comprises the step of: 

enabling the reception and recovery of the multicast message at 
said group of mobile terminals by tuning the mobile terminals to the correct 
30 channel. 

12. An arrangement for multicast in a radio network, the arrange- 
ment comprising: 

a message source (CBE) for generating the broadcast messages, 
a broadcasting entity (CBC) for controlling the broadcasting, of the 
35 broadcast messages, 
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base stations (BTS1, BTS2, BTS3) which broadcast the broadcast 
messages, 

mobile terminals (MS) which receive the broadcast messages, 
cha racterized in that the arrangement further comprises: 
5 a delivery unit (SMSC) for delivering a token to some mobile termi- 

nals, 

an enabling unit (D) for enabling the multicast message reception 
and recovery at the mobile terminal. 

13. An arrangement according to claim 12, characterized in 
1 0 that the arrangement comprises: 

a delivery unit (SMSC) for delivering a cryptographic key (K) to 
some mobile terminals, 

a storage unit (SIM) for storing the delivered cryptographic key (K) 
at the mobile terminal, and 
15 an encryption unit (E) for encrypting the broadcast messages in- 

tended for multicast, 

a decryption unit (D) at the mobile terminal for decrypting the en- 
crypted broadcast messages. 

14. An arrangement according to claim 12 or 13, character- 
20 i z e d in that the broadcast messages are cell broadcast messages. 
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